$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/2DDD88A0A75911F1AF5343123411F970.roa File: 2DDD88A0A75911F1AF5343123411F970.roa (raw, json) Hash identifier: 9EmOCnTu4Fq+Sx1iPpBHYJ6Pu50AYRK5Hfc3dx16G7Y= Subject key identifier: 35:7C:E2:8B:15:EA:B8:CD:CC:F4:97:C1:F2:94:00:00:ED:B2:5D:DB Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 050B Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/2DDD88A0A75911F1AF5343123411F970.roa Signing time: Thu 03 Sep 2026 05:34:49 +0000 ROA not before: Thu 03 Sep 2026 05:34:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 219263 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/23 maxlen: 23 103.99.208.0/24 maxlen: 24 103.99.209.0/24 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Sep 3 05:34:49 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a9906f9-2574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:2e:39:e3:db:67:dd:5c:41:dc:4e:f0:86: 12:25:69:aa:1c:3a:b4:a6:62:31:0f:b8:79:75:b5: 9f:c3:15:ae:9a:2a:71:ba:d2:88:b6:55:e6:f6:00: f6:e5:b6:74:72:7b:d8:9b:9c:44:26:cd:7c:0f:c0: b6:23:27:02:7a:e1:fa:62:1c:72:67:1b:12:db:b2: 26:44:12:50:21:e8:b9:d3:20:e5:7d:5d:42:ea:75: 04:f4:71:48:5a:3a:18:6a:93:e8:7c:60:65:9b:30: f0:0a:44:0b:96:61:5d:14:3d:ac:a3:bf:13:5f:da: d0:4d:66:c7:ef:e9:85:aa:45:5c:c4:73:2c:4a:ee: 48:56:02:63:88:86:ea:c5:6f:41:2e:af:e3:f4:5c: 03:08:8e:31:3c:90:1c:66:ec:3c:df:54:56:c6:25: 3b:d9:8e:0e:a7:1c:f0:a2:5e:1f:d8:25:85:87:8e: 93:00:23:17:cc:39:b4:1d:c7:f1:27:08:79:e7:b2: 7a:ef:c8:6e:f5:73:fb:cd:9e:79:6a:97:0a:ae:91: b3:de:48:17:6c:d7:cf:e2:09:3f:12:d6:82:a3:0c: c3:61:d3:44:41:6d:ff:8d:a0:06:b9:c2:56:aa:40: 28:e4:01:64:a5:3c:7b:d4:7b:d5:63:59:3b:e2:c3: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7C:E2:8B:15:EA:B8:CD:CC:F4:97:C1:F2:94:00:00:ED:B2:5D:DB X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/2DDD88A0A75911F1AF5343123411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption 92:e7:18:76:e1:7c:2c:1f:12:9f:47:63:f5:82:b9:57:79:98: 94:14:87:b8:7e:f2:24:04:99:fa:ce:7d:9d:bc:e5:c5:96:83: 30:df:bd:e9:b2:93:dd:77:d0:bc:18:38:e4:ae:42:bc:4c:8d: c6:fa:07:d0:ba:89:9a:1a:ec:c5:97:ba:5c:3c:21:b8:54:2a: 90:ab:fd:55:dd:f8:55:be:ca:0f:3a:47:1d:d3:34:20:79:ab: 78:d8:e4:b8:7b:75:e4:b3:b5:4e:46:65:0b:14:e3:27:36:23: 4a:27:22:0b:f9:2d:7c:ef:65:0c:b7:ac:48:80:70:37:33:62: 65:d8:5e:db:3b:5f:e4:95:ea:c8:2c:fe:36:c9:9c:eb:a8:ff: cb:b4:dd:da:8c:c4:9f:7c:87:a4:40:df:f2:aa:f0:cd:7a:cc: 85:5b:6e:e3:7c:55:21:9e:0e:18:20:77:cf:7c:14:cf:74:4b: 31:7a:35:4e:dc:d7:a6:83:a2:51:a7:b6:95:10:4d:5d:50:75: 90:a9:a8:5a:2e:81:f4:40:df:25:53:8d:e1:4c:02:5d:1d:53: cd:de:44:90:f8:09:a6:08:9a:b8:8c:48:f4:dc:35:9f:3c:38: 9f:92:c5:0a:56:97:90:35:f1:8e:24:3e:89:46:1b:72:dc:ef: 14:89:b1:c8 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwOTAzMDUzNDQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MDZmOS0yNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWYuOePbZ91cQdxO8IYSJWmqHDq0pmIxD7h5dbWfwxWumipxutKItlXm9gD2 5bZ0cnvYm5xEJs18D8C2IycCeuH6YhxyZxsS27ImRBJQIei50yDlfV1C6nUE9HFI WjoYapPofGBlmzDwCkQLlmFdFD2so78TX9rQTWbH7+mFqkVcxHMsSu5IVgJjiIbq xW9BLq/j9FwDCI4xPJAcZuw831RWxiU72Y4Opxzwol4f2CWFh46TACMXzDm0Hcfx Jwh557J678hu9XP7zZ55apcKrpGz3kgXbNfP4gk/EtaCowzDYdNEQW3/jaAGucJW qkAo5AFkpTx71HvVY1k74sPQMwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFDV84osV 6rjNzPSXwfKUAADtsl3bMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvMkRERDg4QTBB NzU5MTFGMUFGNTM0MzEyMzQxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZ1vZMAwDBARnY9ADBABnY9IwDQYJKoZIhvcNAQELBQADggEBAJLn GHbhfCwfEp9HY/WCuVd5mJQUh7h+8iQEmfrOfZ285cWWgzDfvemyk9130LwYOOSu QrxMjcb6B9C6iZoa7MWXulw8IbhUKpCr/VXd+FW+yg86Rx3TNCB5q3jY5Lh7deSz tU5GZQsU4yc2I0onIgv5LXzvZQy3rEiAcDczYmXYXts7X+SV6sgs/jbJnOuo/8u0 3dqMxJ98h6RA3/Kq8M16zIVbbuN8VSGeDhggd898FM90SzF6NU7c16aDolGntpUQ TV1QdZCpqFougfRA3yVTjeFMAl0dU83eRJD4CaYImriMSPTcNZ88OJ+SxQpWl5A1 8Y4kPolGG3Lc7xSJscg= -----END CERTIFICATE-----Generated at Sat Sep 5 01:41:15 2026 by rpki-client